AIKIDO-2026-386877

camel-platform-http is vulnerable to Insufficient Granularity of Access Control

CVE-2026-85316Published 4 days ago

CVE Score

Medium

Insufficient Granularity of Access Control

TL;DR

Before the fix, platform-http chose proxy mode by testing whether an endpoint path began with proxy, so a route whose path merely started with those characters, such as proxyStats, silently became a forwarding proxy: it registered the catch-all / route and relayed requests toward the target named in the caller's own Host header. Any unauthenticated client able to reach the platform HTTP server could have its requests forwarded that way. This affected every release from 4.0.0 through 4.18.4 and from 4.19.0 through 4.22.0. The fix enables proxy mode only for the exact path proxy, so all other paths serve their own routes again.

How do I fix this?

Upgrade the org.apache.camel:camel-platform-http package to a fixed release on your branch: 4.18.5, 4.22.1.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range and run a platform-http route whose endpoint path begins with proxy but is not exactly proxy, and unauthenticated clients can reach its HTTP server.